Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File:                     qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier:          ZBSeuDaL/y3RMcaYikyHjDxnb6TiMsl3Hho+5KTMp6U=
Subject key identifier:   DD:16:EE:27:C5:C8:11:F3:A3:3C:A1:7A:FF:E1:EF:A1:B9:B9:7E:14
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number:          05F5
Signing time:             Thu 24 Sep 2026 22:49:21 +0000
Manifest this update:     Thu 24 Sep 2026 22:49:20 +0000
Manifest next update:     Thu 01 Oct 2026 22:49:20 +0000
Files and hashes:         1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: DGgJy/f+A5vazggGsIDf/UVJsuw7lJwjChwwB4sEu0E=)
                          2: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
                          3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
                          4: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Sep 24 22:49:20 2026 GMT
            Not After : Oct  1 22:49:20 2026 GMT
        Subject: CN=6ab5a8f1-8ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:5d:e8:d3:66:a0:92:c8:ac:b9:9c:ee:86:
                    47:d9:5c:22:fe:48:bd:8e:32:10:1e:89:b8:40:96:
                    d6:71:3b:00:a2:e7:e3:9c:6e:ac:49:50:7e:b7:9a:
                    a6:cc:06:08:15:43:9c:aa:5d:d1:21:86:56:58:e8:
                    fc:e1:ec:99:f4:1e:b3:d3:10:24:c8:96:73:b2:fb:
                    a2:81:dd:ee:18:db:d1:50:c3:94:0e:b9:e4:ad:09:
                    0d:63:51:5d:0c:0b:c4:1c:b3:bc:4c:a0:cd:48:73:
                    63:e5:4a:20:6f:ea:8e:1e:a4:0f:33:ca:6b:a1:cd:
                    fd:94:49:7b:11:c0:07:3c:56:cd:88:6e:4b:04:0e:
                    b7:9c:eb:8b:6d:81:18:26:5d:52:54:f5:56:3e:e6:
                    b7:70:d8:f6:09:7f:ae:e7:16:88:b0:8f:bc:f8:80:
                    52:c9:2e:46:00:6b:8e:f3:01:29:6e:c3:7e:94:bb:
                    cf:0a:6e:05:af:9e:39:32:7d:c8:66:2c:6c:9e:d0:
                    22:ad:af:ef:9e:ac:e5:8e:27:8e:70:7e:86:22:b1:
                    4b:c4:9c:25:b1:17:0a:9c:02:82:d7:a2:94:c8:b0:
                    36:25:cc:e5:9b:64:0e:74:df:c2:81:ab:c9:0e:12:
                    68:8b:e3:a2:82:74:24:4d:ae:5a:4d:16:34:99:37:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:EE:27:C5:C8:11:F3:A3:3C:A1:7A:FF:E1:EF:A1:B9:B9:7E:14
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:23:94:31:c7:b4:05:49:85:c8:a2:70:56:f0:9a:1f:a2:
         cb:0d:d0:47:39:82:0f:a8:57:42:2e:f6:57:2a:96:37:54:0f:
         cc:65:47:31:ac:fd:de:27:d2:9d:e1:25:dc:59:33:5a:d5:de:
         be:fc:6d:0d:bf:6b:a5:35:36:f2:b9:81:bc:cf:3f:1c:e8:3c:
         6b:10:95:74:0c:11:f1:51:60:16:a4:78:8f:e6:2e:29:a2:47:
         5d:91:bd:54:eb:31:f7:5f:72:fd:43:e8:4c:10:fb:90:ca:20:
         84:19:14:1f:ff:0b:36:30:9d:06:f4:4f:c5:84:11:8a:36:09:
         f8:37:58:f2:d9:3d:78:6d:30:4d:d6:ae:5d:8c:65:49:73:c3:
         6f:1f:f7:bd:f8:46:db:e7:5c:f8:cc:e6:bc:01:a6:b8:66:f9:
         49:5b:06:31:6b:7b:a9:b0:6d:66:2d:c1:91:e7:7f:02:df:46:
         3a:ad:da:c2:f9:a2:06:03:b8:89:81:27:8f:84:7c:52:f1:e8:
         e3:76:bc:e0:fb:06:da:a6:21:cd:1f:08:87:f6:9f:92:6f:61:
         de:d0:a9:4c:21:aa:53:ae:94:12:63:f2:a5:3d:2a:e5:43:7e:
         d3:1f:af:29:8a:14:b2:dd:e5:ef:10:94:6a:9f:3a:5f:75:15:
         4a:bd:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:21 2026 by rpki-client